This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GiNUX8w7ypgtmZFMhM6j1zdMu0w.roa File: GiNUX8w7ypgtmZFMhM6j1zdMu0w.roa (raw, json) Hash identifier: 9DU7FAOhW5DnDvQJGSuh8+k0Pi7oSGRnyIkt07lc4I8= Subject key identifier: 1A:23:54:5F:CC:3B:CA:98:2D:99:91:4C:84:CE:A3:D7:37:4C:BB:4C Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E4CC9249FBA9685C60EF1BC870FB Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GiNUX8w7ypgtmZFMhM6j1zdMu0w.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 2.56.108.0/24 maxlen: 24 2.56.109.0/24 maxlen: 24 5.181.85.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.81.113.0/24 maxlen: 24 45.81.115.0/24 maxlen: 24 45.88.139.0/24 maxlen: 24 45.94.170.0/24 maxlen: 24 45.132.181.0/24 maxlen: 24 45.132.183.0/24 maxlen: 24 45.144.213.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 85.209.120.0/24 maxlen: 24 193.57.41.0/24 maxlen: 24 194.15.52.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:cc:92:49:fb:a9:68:5c:60:ef:1b:c8:70:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a23545fcc3bca982d99914c84cea3d7374cbb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b8:d3:89:ad:c9:e8:73:9d:4f:53:41:2c:a4: a5:6a:e6:56:7b:69:32:fe:06:03:05:02:40:12:48: 6d:9f:25:69:b7:f6:0b:d3:53:01:23:2b:9a:a1:91: 99:3c:c5:47:2b:a1:dd:dc:4d:06:13:5f:73:11:8c: 65:71:3c:e9:56:46:de:f1:30:71:65:0b:72:9c:4e: 74:62:a3:5c:62:ec:1f:1b:76:f3:2f:65:ba:b7:72: 10:84:b1:f6:86:2c:70:f1:f1:e7:fb:80:88:1e:d1: d6:2d:c2:e1:46:f8:08:58:83:b2:5a:8c:58:f3:35: 0c:10:20:91:c8:3e:8a:08:5c:23:81:e1:2e:ab:9d: d4:9d:78:bb:48:74:12:bd:e1:46:2d:ce:a0:2d:7a: 07:7a:7d:ed:63:3f:cb:52:2e:5d:d7:95:a6:23:71: 2a:11:ff:5f:b9:cb:17:19:25:dd:85:6d:0e:6f:2a: 42:ad:f2:c0:37:a8:58:fd:36:c8:97:39:0f:99:b7: 49:b4:5a:37:34:f8:aa:a2:ba:c5:e9:a3:82:9a:9c: f8:33:66:50:62:23:2e:c1:de:29:1c:14:5c:49:3a: 3f:aa:91:d0:8c:69:da:78:2d:41:72:8e:32:4e:10: 88:e4:da:04:18:4b:e6:af:6b:c4:ad:8c:35:c2:67: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:23:54:5F:CC:3B:CA:98:2D:99:91:4C:84:CE:A3:D7:37:4C:BB:4C X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GiNUX8w7ypgtmZFMhM6j1zdMu0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.108.0/23 5.181.85.0/24 5.181.87.0/24 45.13.190.0/24 45.81.113.0/24 45.81.115.0/24 45.88.139.0/24 45.94.170.0/24 45.132.181.0/24 45.132.183.0/24 45.144.213.0/24 77.83.37.0/24 85.209.120.0/24 193.57.41.0/24 194.15.52.0/24 195.211.188.0/24 Signature Algorithm: sha256WithRSAEncryption 12:65:e8:d4:76:4c:ca:44:30:4e:a6:9b:2e:80:74:1a:71:61: e3:0a:cd:ee:df:85:48:d5:a3:91:b2:8c:9d:b9:32:10:18:89: 67:83:c8:1a:03:53:11:27:d0:6e:b6:78:32:4d:4a:87:c6:13: 8b:7b:11:b1:82:38:6d:98:ac:01:76:3f:d7:09:0e:1c:41:ae: 6e:dd:71:9a:4c:bb:e6:88:d0:23:aa:f2:b0:d2:3d:b2:67:18: e9:af:76:f5:e3:b8:86:0c:ab:f3:2b:b5:97:36:f9:41:fb:1c: 8d:4a:e4:54:e9:6e:2d:8e:10:05:54:0a:c3:17:21:4a:72:83: c6:83:b3:75:35:83:c6:9a:2b:65:39:06:43:da:47:07:00:cb: fa:a0:1b:b3:95:fb:a1:fe:cd:d7:0c:61:0c:f5:e8:a6:1c:a1: 82:f3:21:54:38:fc:2b:80:58:5d:0c:4c:04:e3:7c:2a:2d:96: c0:c1:30:ba:2e:a5:1e:5e:c5:e7:c8:23:dd:38:78:eb:f0:48: ef:aa:e0:37:53:a3:7b:be:93:15:90:73:50:ea:d6:b3:56:56: ce:67:46:84:da:2c:d5:05:14:01:3b:57:a3:13:12:ae:8d:44: 75:7d:8c:2c:74:49:66:5b:0a:5d:54:58:1c:bb:cf:3e:af:d0: ed:de:42:59 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt/FeTMkkn7qWhcYO8byHD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTIzNTQ1ZmNjM2JjYTk4MmQ5OTkxNGM4NGNlYTNkNzM3NGNiYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bjTia3J6HOdT1NBLKSlauZWe2ky /gYDBQJAEkhtnyVpt/YL01MBIyuaoZGZPMVHK6Hd3E0GE19zEYxlcTzpVkbe8TBx ZQtynE50YqNcYuwfG3bzL2W6t3IQhLH2hixw8fHn+4CIHtHWLcLhRvgIWIOyWoxY 8zUMECCRyD6KCFwjgeEuq53UnXi7SHQSveFGLc6gLXoHen3tYz/LUi5d15WmI3Eq Ef9fucsXGSXdhW0ObypCrfLAN6hY/TbIlzkPmbdJtFo3NPiqorrF6aOCmpz4M2ZQ YiMuwd4pHBRcSTo/qpHQjGnaeC1Bco4yThCI5NoEGEvmr2vErYw1wmfWWwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFBojVF/MO8qYLZmRTITOo9c3TLtMMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvR2lOVVg4dzd5cGd0bVpGTWhNNmoxemRNdTB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBAjhsAwQA BbVVAwQABbVXAwQALQ2+AwQALVFxAwQALVFzAwQALViLAwQALV6qAwQALYS1AwQA LYS3AwQALZDVAwQATVMlAwQAVdF4AwQAwTkpAwQAwg80AwQAw9O8MA0GCSqGSIb3 DQEBCwUAA4IBAQASZejUdkzKRDBOppsugHQacWHjCs3u34VI1aORsoyduTIQGIln g8gaA1MRJ9ButngyTUqHxhOLexGxgjhtmKwBdj/XCQ4cQa5u3XGaTLvmiNAjqvKw 0j2yZxjpr3b147iGDKvzK7WXNvlB+xyNSuRU6W4tjhAFVArDFyFKcoPGg7N1NYPG mitlOQZD2kcHAMv6oBuzlfuh/s3XDGEM9eimHKGC8yFUOPwrgFhdDEwE43wqLZbA wTC6LqUeXsXnyCPdOHjr8EjvquA3U6N7vpMVkHNQ6tazVlbOZ0aE2izVBRQBO1ej ExKujUR1fYwsdElmWwpdVFgcu88+r9Dt3kJZ -----END CERTIFICATE-----Generated at Tue Jan 6 20:50:39 2026 by rpki-client